CVE-2020-8119

MEDIUM

Nextcloud server <17.0.0 - Info Disclosure

Title source: llm

Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app.

Core 4

Core References

Third Party Advisory x_refsource_misc

Vendor Advisory x_refsource_misc

Mailing List vendor-advisory x_refsource_suse

Mailing List vendor-advisory x_refsource_suse

CVSS v3 4.3

EPSS 0.0052

EPSS Percentile 66.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-285 CWE-863

Status published

Products (1)

nextcloud/nextcloud_server < 15.0.13

Published Feb 04, 2020

Tracked Since Feb 18, 2026